Determining the Scope of a Data Breach

12/18/2009

One of the first steps that should be taken by any organization facing a data loss – whether that company has an incident response plan in place or not – is to get an explicit sense of scope. What happened? When? How many records were lost?

Properly determining the scope of a data breach can save you a lot of time and even more money when compared to the alternative. Consider these two case study briefs, taken straight from Kroll experiences: